How to create an External DNS Server using Windows Server 2003 : dns, external, server, windows, 2003

May 17, 2008 01:26am pdt

1. BillBach 10,355
2. RobWill 9,100
3. briancassin 6,000
4. johnb6767 4,600
5. chilternPC 4,000
5. techno-wiz 4,000
7. Chris-Dent 2,750
8. younghv 2,500
8. Kutyi 2,500
10. lrmoore 2,400
11. bbao 2,125
12. and235100 2,100
13. meverest 2,000
13. SPH 2,000
13. Johnjces 2,000
13. jkr 2,000
13. SStory 2,000
13. Chiefoft... 2,000
13. steedBmaher 2,000
13. tlman12 2,000
13. souseran 2,000
13. drexxl 2,000
13. Addihul 2,000
13. Iced-evil 2,000
13. lamaslany 2,000
13. ngailfus 2,000
13. stuartp44 2,000
13. aubertmr 2,000
13. grahamno... 2,000
13. acesover... 2,000
13. theProfessa 2,000
13. markmems 2,000
13. Freya28 2,000
13. DrDave242 2,000
13. Bamit99 2,000
13. Psychotec 2,000
13. dkarpekin 2,000
13. dpk_wal 2,000
13. Alex_AT 2,000
13. evilrix 2,000
13. kevin_uk05 2,000

1. RobWill 95,300
2. lrmoore 74,563
3. adamdrayer 70,785
4. Fatal_Ex... 66,696
5. stevenlewis 59,618
6. Chris-Dent 51,935
7. keith_al... 50,482
8. dragon-it 29,289
9. oBdA 26,002
10. Jay_Jay70 25,524
11. PeteLong 22,548
12. crissand 21,947
13. Netman66 20,812
14. johnb6767 19,997
15. Debsyl99 19,200

09.12.2007 at 01:45AM PDT, ID: 22822763

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

5.8

How to create an External DNS Server using Windows Server 2003

Zones: Internet Protocols, Domain Name Service (DNS)

Tags: dns, external, server, windows, 2003

Hi Experts
I wonder to know on how to setup my own Public DNS server using Windows Server 2003.
I have ISP registered two records:
A record - 203.100.100.1
NS record - capnet.com

I have done basic setup of Window Server 2003 with DNS Server Service installed using IP: 172.16.100.1. The NAT is configured in firewall 172.16.100.1 <--> 203.100.100.1 with allow incoming traffics: HTTP, HTTPS, SMTP, DNS. Outgoing traffic policy is no restriction.

I created primary zone from Forward Lookup Zones. Zone Name: capnet.com
I created a A records mail1.capnet.com -> 203.100.100.1

I tried to ping 203.100.100.1 at home, it is successful. But it failed to ping mail1.capnet.com

I would appreciate if you could show me the way and correct my mistake

Start your free trial to view this solution

Question Stats

Zone: Networking

Question Asked By: chekfu

Solution Provided By: Democracydata

Participating Experts: 4

Solution Grade: C

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

09.12.2007 at 03:02AM PDT, ID: 19874941

Rank: Sage

Chris-Dent:

Hey,

Which server did you make the change on, ns1.itlnet.com or bali.itlnet.com?

Neither is able to show a record for mail1 at the moment.

Chris

09.12.2007 at 07:03AM PDT, ID: 19876301

chekfu:

Hi Chris

Just like to know the way on how to setup External DNS Server.
In future, I create a A record. It is pingable from outside.

So, I tried and I do not know whether I have done it correctly.

09.12.2007 at 08:40AM PDT, ID: 19877281

bluetab:

I wouldn't recommend making your Windows 2003 server a Public DNS server as this will create a lot more security risks. You will have to open port 53 (DNS) on your firewall to forward that to your server. You would then have to register your Public IP as the Name Server for your domain with your nane registrar. Doing this is going to open your server up a lot and you'll have a lot more bandwidth being used by people making DNS requests.

I would recommend that you use your registrar (where you registered your domain) as your external DNS host. On their site you would then create the A and MX records.

09.12.2007 at 10:30AM PDT, ID: 19878322

Democracydata:

1. your firewall policy doesn't allow pings
2. capnet.com is hosted at itlnet.com and not on your server.You need to change your name server info at networkSolutions if you want your primary name server to be 203.100.100.1

currently it set to
capnet.com. 172800 IN NS bali.itlnet.com.
capnet.com. 172800 IN NS ns1.itlnet.com.

3. capnet.com is resolving to 207.182.255.172. that is why you can ping it

4. the email server for that domain is currently set to
capnet.com. 3600 IN MX 5 mfilter.itlnet.com.

if you plan to receive emails on mail1.capnet.com you also have to create an MX record in addition to A record as well as PTR record for reverse resolution if you plan to send emails from that server.

alex

09.13.2007 at 07:24AM PDT, ID: 19883892

chekfu:

Hi guys

Probably, you get me wrong.

capnet.com is just an example for this post. It can be abc.com or xyz.com.uk.

I wonder on how to setup External DNS Server if I have a registered NS record (xyz.com.uk) and A record (ns.xyz.com.uk) is 203.100.100.1.

I have setup a DNS Server using Windows Server 2003, its local domain is xyz.local.

I have created a primary forward zone named xyz.com.uk. and follow by A record: mail1 with IP: 203.100.100.2 is created.

I couldn't ping mail1.xyz.com.uk from outside. why? Really thanks if correct me.

I tried to create a A record within

09.13.2007 at 07:56AM PDT, ID: 19884210

bluetab:

Are you trying to host your Public DNS for xyz.com.uk on your Windows 2003 server? If so please see my first post regarding security issues, it's also a lot of work. It's much better to host your Public DNS on an external DNS server either through ZoneEdit.com or your Domain Name Registrar.

But either way, once you've setup your A and MX records you will need to configure your firewall to forward the appropriate ports to your server. For instance to ping your server you will need to allow ICMP traffic on your firewall.

09.13.2007 at 08:01AM PDT, ID: 19884267

Democracydata:

1. your firewall policy doesn't allow pings from the outside
2. You also need an MX record if your plan to receive emails on mail1.xyz.com.uk
3. to check if your domain is set the way you want -
+ whois xyz.com.uk - will show authoritative name servers as well as contact info. authoritative name server at registrar should point on your DNS server ns.xyz.com.uk
4. Your zone probably looks similar to one below

@ IN SOA ns.xyz.com.uk.
youremail@xyz.com.uk. (
      2007091301 ; serial number
      86400 ; refresh
      3600 ; retry
      604800 ; expire
      86400 ) ; minimum TTL

@ NS      ns.xyz.com.uk.
ns.xyz.com.uk. A        203.100.100.1

@ MX      10      mail1.xyz.com.uk.
mail1 A        203.100.100.2

5. If you want to test your setup
nslookup mail1.xyz.com.uk 4.2.2.2. - will show if the DNS is working as you think it should

Accepted Solution

09.23.2007 at 07:32PM PDT, ID: 19946258

hilltop:

MX records are not pingable if setup on MS DNS.

09.23.2007 at 07:37PM PDT, ID: 19946282

hilltop:

Despite any registar settings that may be causing this. You can test your DNS setup by changing your NIC's TCP DNS settings to use your servers IP instead of any auto assigned values.

Try changing this and pinging the record again.

If it works then you have issues at your registrar and should see their help documents on registering your server as a name server, and udating your domain to use the new records etc.

A simple whois will show you if your domain is set to use your server for DNS just look at the name servers. If they are not yours then you know were you need to focus.

09.23.2007 at 07:43PM PDT, ID: 19946314

hilltop:

Current name servers for capnet.com
Name Server: BALI.ITLNET.COM 207.182.255.132
Name Server: NS1.ITLNET.COM 207.182.255.131

If these IP's do not belong to your server then thats your problem. You have not correctly registered your servers IP as a name server at your registrar, and have not updated your domain to use the new record(s)

20080206-EE-VQP-25 / EE_QW_2_20070628